Static task
static1
Behavioral task
behavioral1
Sample
94966de3f06b790fa93714b158ad0d5c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
94966de3f06b790fa93714b158ad0d5c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
94966de3f06b790fa93714b158ad0d5c_JaffaCakes118
-
Size
240KB
-
MD5
94966de3f06b790fa93714b158ad0d5c
-
SHA1
a2dcc208b95df7a592e74db128bc9b31ef266681
-
SHA256
e766c15e6d0694c804c177c7eaa968c2462a14854186bf3770ef7307b257f2a0
-
SHA512
d5536a20ff3a30a10ee2394d64946c3984c6ccd015086ce9ae9d847e57f3faf57c866e2a07b63c33acb2b98dcd684eb787d724fb794cdefadf76da0e5c24a8a6
-
SSDEEP
3072:9EtoJ1PSdbWelMIMuxT6caHNxmngINgSaxfEojkOw6nXx3eNRpCp2wxw9L10u8df:9XPSdPlMgyHNxe8rJw6BwCp29ZY1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94966de3f06b790fa93714b158ad0d5c_JaffaCakes118
Files
-
94966de3f06b790fa93714b158ad0d5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
06962c1618d5e40c5c3b0bed89e9be9c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCommandLineA
GetVersionExA
GetProcAddress
GetModuleHandleA
ExitProcess
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
VirtualFree
WriteFile
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
LoadLibraryExA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
Sleep
VirtualAlloc
HeapReAlloc
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
VirtualProtect
GetSystemInfo
VirtualQuery
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ